zerobounce-sdk 1.1.1 → 2.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 804ff0380f6e305c6b80ceaec623ed06f014927074ebef93598b9dab3d23c988
-  data.tar.gz: 64ff74c48f382f6cb50d29c1d9f6e95d149929289e3971f27c2e1cfcc7088706
+  metadata.gz: e9f3c2a7bac4386a95e440f91b2c05fd70a9ed4fba0676aba089bb654b6c0a78
+  data.tar.gz: 829bd8ba5c1f64e2c3580a43062b4b11d372b25f75f18cedcd3d03d186bff809
 SHA512:
-  metadata.gz: 8c4b82770126e3f7f0ef3699688ad11bf526163df669d3a6d637ff87d183955b1876e99e2a9e953eebb5b4102863ab8ff5204417a77d7e47722fe3b14977abcf
-  data.tar.gz: a9ebe2bd4422d96e85ffd5331456cb0669090a1ade71f828249b32a44730e843b05ffa24148673b353130b4e896075acf035d59c9963bc83ad60dcb841c56f4f
+  metadata.gz: d7252217055c4d602bf6723b06463fbfc0591c1793a2d72857acfaa1dddd50b66217afbf139afccf79faeccb73804f695b921cfac3c1955ee949e5d8e37cf398
+  data.tar.gz: c2d6cff7f176b64d1b048b596f4a09d7ff9140549bdd450a193ca349dcaf74899322c743d0abeca65e046e979da96411feabdffa62ccf89275c6d2e7f6a42ce1

data/.dockerignore

@@ -0,0 +1,17 @@
+# Keep .git so gemspec `git ls-files` works during `bundle install` in the image.
+
+# Docs and tooling not needed to run specs in the image
+*.md
+documentation*.md
+.spec
+.rspec_status
+coverage/
+tmp/
+pkg/
+vendor/bundle
+
+# OS & env
+.DS_Store
+Thumbs.db
+.env
+.env.*

data/.env.example

@@ -0,0 +1,3 @@
+# ZeroBounce API key (standard). Get your key at https://www.zerobounce.net/docs/api-dashboard
+# Copy this file to .env and set your key.
+ZEROBOUNCE_API_KEY=your_api_key_here

data/.github/auto_assign.yml

@@ -0,0 +1,5 @@
+addReviewers: false
+addAssignees: true
+assignees:
+  - franciscbalint
+numberOfAssignees: 1

data/.github/dependabot.yml

@@ -0,0 +1,35 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy
+
+version: 2
+updates:
+  # Keep the Ruby dependencies up to date
+  - package-ecosystem: "bundler"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    target-branch: "develop"
+    labels:
+      - "ruby dependencies"
+    groups:
+      bundler:
+        applies-to: version-updates
+        patterns:
+          - "*"
+
+  # Keep the Github Actions dependencies up to date
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    target-branch: "develop"
+    labels:
+      - "github dependencies"
+    groups:
+      github:
+        applies-to: version-updates
+        patterns:
+          - "*"

data/.github/workflows/auto_assign_ci.yaml

@@ -0,0 +1,21 @@
+name: Auto Assign
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - reopened
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  add-assignee:
+    name: Auto assign (me only)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: kentaro-m/auto-assign-action@v2.0.2
+        with:
+          configuration-path: ".github/auto_assign.yml"

data/.github/workflows/codeql.yml

@@ -0,0 +1,105 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL Advanced"
+
+on:
+  push:
+    branches: [ "develop" ]
+  pull_request:
+    branches: [ "develop" ]
+  schedule:
+    - cron: '19 14 * * 4'
+
+permissions:
+  security-events: write
+  packages: read
+  actions: read
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    # Runner size impacts CodeQL analysis time. To learn more, please see:
+    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+    #   - https://gh.io/supported-runners-and-hardware-resources
+    #   - https://gh.io/using-larger-runners (GitHub.com only)
+    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    permissions:
+      # required for all workflows
+      security-events: write
+
+      # required to fetch internal or private CodeQL packs
+      packages: read
+
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: ruby
+          build-mode: none
+        # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift'
+        # Use `c-cpp` to analyze code written in C, C++ or both
+        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
+        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
+        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
+        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
+        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v7
+
+    # Add any setup steps before running the `github/codeql-action/init` action.
+    # This includes steps like installing compilers or runtimes (`actions/setup-node`
+    # or others). This is typically only required for manual builds.
+    # - name: Setup runtime (example)
+    #   uses: actions/setup-example@v1
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v4.36.3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+    # If the analyze step fails for one of the languages you are analyzing with
+    # "We were unable to automatically build your code", modify the matrix above
+    # to set the build mode to "manual" for that language. Then modify this step
+    # to build your code.
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+    - name: Run manual build steps
+      if: matrix.build-mode == 'manual'
+      shell: bash
+      run: |
+        echo 'If you are using a "manual" build mode for one or more of the' \
+          'languages you are analyzing, replace this with the commands to build' \
+          'your code, for example:'
+        echo '  make bootstrap'
+        echo '  make release'
+        exit 1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v4.36.3
+      with:
+        category: "/language:${{matrix.language}}"

data/.github/workflows/publish.yml

@@ -0,0 +1,131 @@
+name: Publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        type: string
+        description: Tag to publish (e.g. v2.1.5)
+        required: true
+
+permissions:
+  contents: read
+
+jobs:
+  validate-tag:
+    name: Validate tag
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event.inputs.tag }}
+
+      - name: Verify tag and gem version
+        run: |
+          TAG="${{ github.event.inputs.tag }}"
+          if [ -z "$TAG" ]; then
+            echo "Error: Tag is required."
+            exit 1
+          fi
+          if ! git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "Error: Tag '$TAG' does not exist."
+            exit 1
+          fi
+          TAG_VERSION="${TAG#v}"
+          PKG_VERSION=$(grep -E "VERSION\s*=" lib/zerobounce/version.rb | sed -E "s/.*'([^']+)'.*/\1/")
+          if [ -z "$PKG_VERSION" ]; then
+            echo "Error: Could not read version from lib/zerobounce/version.rb"
+            exit 1
+          fi
+          if [ "$PKG_VERSION" != "$TAG_VERSION" ]; then
+            echo "Error: lib/zerobounce/version.rb ($PKG_VERSION) does not match tag ($TAG)."
+            exit 1
+          fi
+          echo "Publishing tag: $TAG (zerobounce-sdk@$PKG_VERSION)"
+
+  test:
+    name: Test
+    needs: [validate-tag]
+    if: ${{ !cancelled() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled') }}
+    runs-on: ubuntu-latest
+    env:
+      ZEROBOUNCE_API_KEY: "invalid_key_for_tests"
+    steps:
+      - name: Checkout tag
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.inputs.tag }}
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.2"
+          bundler-cache: true
+
+      - name: Run specs
+        run: bundle exec rspec
+
+  publish:
+    name: Build and publish to RubyGems
+    needs: [test]
+    if: ${{ !cancelled() && !failure() }}
+    runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Checkout tag
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.inputs.tag }}
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.2"
+          bundler-cache: true
+
+      - name: Configure RubyGems credentials
+        uses: rubygems/configure-rubygems-credentials@main
+        with:
+          api-token: ${{ secrets.RUBYGEMS_API_TOKEN }}
+
+      - name: Build gem
+        run: gem build zerobounce.gemspec
+
+      - name: Publish to RubyGems
+        run: |
+          GEM_FILE=$(ls zerobounce-sdk-*.gem)
+          echo "Pushing $GEM_FILE"
+          gem push "$GEM_FILE"
+
+  release:
+    name: Create GitHub Release
+    needs: [publish]
+    if: ${{ !cancelled() && !failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.inputs.tag }}
+          fetch-depth: 0
+
+      - name: Create release if missing
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          TAG="${{ github.event.inputs.tag }}"
+          if gh release view "$TAG" --repo "${{ github.repository }}" >/dev/null 2>&1; then
+            echo "Release $TAG already exists, skipping."
+          else
+            gh release create "$TAG" \
+              --repo "${{ github.repository }}" \
+              --title "$TAG" \
+              --generate-notes
+          fi

data/.github/workflows/sdk_ci.yml

@@ -0,0 +1,29 @@
+# Run RSpec tests (VCR cassettes; no live API key needed for recorded specs).
+name: SDK CI
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches: [main, master]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    env:
+      ZEROBOUNCE_API_KEY: "invalid_key_for_tests"
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.2"
+          bundler-cache: true
+
+      - name: Run specs
+        run: bundle exec rspec

data/.gitignore

@@ -62,3 +62,9 @@ build-iPhoneSimulator/
 # Log files
 output.err
 output.log
+
+.DS_Store
+Thumbs.db
+.idea/
+.cursor/
+.env

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+# 2.1.7
+
+* Update Gemfile.lock for v2.1.6 release.
+
+# 2.1.6
+
+* Route `validatebatch` requests to `api.zerobounce.net` instead of `bulkapi.zerobounce.net`.
+
+# 2.1.1
+
+* Raise development and transitive dependency floors to address security advisories for REXML, Addressable, and YARD (updated `Gemfile.lock`; see `Gemfile` and `zerobounce.gemspec`).
+
 # 0.3.0
 * Update ruby and bundler version
 

data/CODE_OF_CONDUCT.md

@@ -54,12 +54,7 @@ further defined and clarified by project maintainers.
 
 ## Enforcement
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported by contacting the project team at afrase91@gmail.com. All
-complaints will be reviewed and investigated and will result in a response that
-is deemed necessary and appropriate to the circumstances. The project team is
-obligated to maintain confidentiality with regard to the reporter of an incident.
-Further details of specific enforcement policies may be posted separately.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at **integrations@zerobounce.net**. All complaints will be reviewed and investigated promptly and fairly. The project team is obligated to maintain confidentiality with regard to the reporter of an incident.
 
 Project maintainers who do not follow or enforce the Code of Conduct in good
 faith may face temporary or permanent repercussions as determined by other

data/CONTRIBUTING.md

@@ -1 +1,112 @@
-TODO fill this out
+# Contributing to Zero Bounce Ruby SDK
+
+Thank you for your interest in contributing. This document explains how to get set up, run tests, and submit changes.
+
+## Code of Conduct
+
+By participating in this project, you agree to uphold our [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Getting Started
+
+### Prerequisites
+
+* Ruby 3.2+ (see [.ruby-version](.ruby-version))
+* [Bundler](https://bundler.io/) ~> 2.4
+
+### Setup
+
+```bash
+git clone https://github.com/zerobounce/zero-bounce-ruby.git
+cd zero-bounce-ruby
+bundle install
+```
+
+### Running Tests
+
+Tests use [RSpec](https://rspec.info/) with [VCR](https://github.com/vcr/vcr) for recorded HTTP interactions. Use the placeholder key so cassettes match:
+
+```bash
+ZEROBOUNCE_API_KEY=vcr_test_key bundle exec rspec
+```
+
+Or copy `.env.example` to `.env`, set `ZEROBOUNCE_API_KEY=vcr_test_key`, then:
+
+```bash
+bundle exec rspec
+```
+
+**With Docker:**
+
+```bash
+docker build -t zerobounce-ruby-test .
+docker run --rm zerobounce-ruby-test
+```
+
+### Code Style
+
+The project uses [RuboCop](https://github.com/rubocop/rubocop). Run before submitting:
+
+```bash
+bundle exec rubocop
+```
+
+## How to Contribute
+
+### Reporting Bugs
+
+Open an [issue](https://github.com/zerobounce/zero-bounce-ruby/issues) and include:
+
+* Ruby version (`ruby -v`)
+* Steps to reproduce
+* Expected vs actual behavior
+* Relevant code or error messages
+
+### Suggesting Changes
+
+* Check existing issues and pull requests first.
+* Open an issue to discuss larger changes or API design before coding.
+
+### Submitting Changes
+
+1. **Fork** the repository and create a branch from `main`:
+   ```bash
+   git checkout -b feature/your-feature-name
+   ```
+
+2. **Make your changes** and add or update tests where relevant.
+
+3. **Run the suite** and RuboCop:
+   ```bash
+   ZEROBOUNCE_API_KEY=vcr_test_key bundle exec rspec
+   bundle exec rubocop
+   ```
+
+4. **Commit** with a clear message (e.g. `Add X`, `Fix Y`).
+
+5. **Push** your branch and open a **Pull Request** against `main`.
+
+6. In the PR description, briefly explain what changed and why. Link any related issues.
+
+Maintainers will review and may request changes. Once approved, your PR can be merged.
+
+## Project Layout
+
+* `lib/` – SDK source (entry point: `lib/zerobounce.rb`)
+* `spec/` – RSpec tests and VCR cassettes (`spec/cassettes/`)
+* `data/` – Sample CSV files for batch validation and scoring examples
+
+## Re-recording VCR Cassettes
+
+If you change or add API calls and need to re-record cassettes:
+
+1. Use a valid Zero Bounce API key (e.g. from [dashboard](https://www.zerobounce.net/docs/api-dashboard)).
+2. Set `ZEROBOUNCE_API_KEY` and run the specs; VCR will record new HTTP interactions.
+3. Replace any real API key in the new cassette files with `vcr_test_key` before committing, so the repo never contains real credentials.
+
+## Questions
+
+* [Zero Bounce API docs](https://www.zerobounce.net/docs/)
+* [Project homepage](https://zerobounce.net)
+* Contact: **integrations@zerobounce.net**
+
+Thanks for contributing.

data/Dockerfile

@@ -0,0 +1,17 @@
+# ZeroBounce Ruby SDK – test image (Ruby 3.2)
+FROM ruby:3.2-alpine
+
+RUN apk add --no-cache build-base git
+
+WORKDIR /app
+
+COPY . .
+# Gemfile.lock expects Bundler 2.4.x (see gemspec); Ruby 3.2 image may ship Bundler 4.x.
+RUN gem install bundler -v 2.4.22 && \
+    bundle config set --local path 'vendor/bundle' && \
+    bundle _2.4.22_ install
+
+# Dummy key for VCR/cassette-based specs; override with env for live API
+ENV ZEROBOUNCE_API_KEY="${ZEROBOUNCE_API_KEY:-invalid_key_for_tests}"
+
+CMD ["bundle", "_2.4.22_", "exec", "rspec"]

data/Gemfile

@@ -7,3 +7,7 @@ git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
 # Specify your gem's dependencies in zerobounce.gemspec
 gemspec
 
+# Transitive dependency floors (security advisories: REXML DoS/ReDoS, Addressable ReDoS).
+gem 'rexml', '>= 3.4.4'
+gem 'addressable', '>= 2.8.10'
+

data/Gemfile.lock

@@ -1,16 +1,18 @@
 PATH
   remote: .
   specs:
-    zerobounce-sdk (1.1.1)
-      dotenv (~> 2.8.1)
+    zerobounce-sdk (2.1.8)
+      dotenv
       rest-client (~> 2.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    addressable (2.8.4)
-      public_suffix (>= 2.0.2, < 6.0)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.2)
+    base64 (0.3.0)
+    bigdecimal (4.0.1)
     coderay (1.1.3)
     crack (0.4.5)
       rexml
@@ -18,24 +20,26 @@ GEM
     docile (1.4.0)
     domain_name (0.5.20190701)
       unf (>= 0.0.5, < 1.0.0)
-    dotenv (2.8.1)
+    dotenv (3.1.8)
     hashdiff (1.0.1)
     http-accept (1.7.0)
     http-cookie (1.0.5)
       domain_name (~> 0.5)
     json (2.6.3)
+    logger (1.7.0)
     method_source (1.0.0)
     mime-types (3.5.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2023.0808)
     netrc (0.11.0)
+    ostruct (0.6.3)
     parallel (1.22.1)
     parser (3.2.2.0)
       ast (~> 2.4.1)
     pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
-    public_suffix (5.0.1)
+    public_suffix (7.0.5)
     rainbow (3.1.1)
     rake (13.0.6)
     regexp_parser (2.7.0)
@@ -44,7 +48,7 @@ GEM
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
-    rexml (3.2.5)
+    rexml (3.4.4)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -93,20 +97,28 @@ GEM
       unf_ext
     unf_ext (0.0.8.2)
     unicode-display_width (2.4.2)
-    vcr (6.1.0)
+    vcr (6.4.0)
     webmock (3.18.1)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
-    yard (0.9.32)
+    yard (0.9.43)
 
 PLATFORMS
+  arm64-darwin-24
+  arm64-darwin-25
   x86_64-linux
 
 DEPENDENCIES
+  addressable (>= 2.8.10)
+  base64
+  bigdecimal
   bundler (~> 2.4.6)
+  logger
+  ostruct
   pry (~> 0.14.1)
   rake (~> 13.0)
+  rexml (>= 3.4.4)
   rspec (~> 3.0)
   rspec_junit_formatter (~> 0.4.1)
   rubocop (~> 1.15)
@@ -114,10 +126,10 @@ DEPENDENCIES
   rubocop-rake (~> 0.5.1)
   rubocop-rspec (~> 2.3)
   simplecov (~> 0.21.2)
-  vcr (~> 6.1.0)
+  vcr (~> 6.4)
   webmock (~> 3.18)
-  yard (~> 0.9.26)
+  yard (~> 0.9.42)
   zerobounce-sdk!
 
 BUNDLED WITH
-   2.4.6
+   2.4.22

data/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023 ZeroBounce
+Copyright (c) 2026 ZeroBounce
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal